Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...
5.4CVSS6.3AI score0.01051EPSS
SaveExploits1References1
Debian CVE•added 2018/04/12 4:0 p.m.•49 views
CVE-2018-10061
Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...
